Report - nj.txt.exe

PE File
ScreenShot
Created 2023.12.14 16:40 Machine s1_win7_x6401
Filename nj.txt.exe
Type MS-DOS executable, MZ for MS-DOS
AI Score Not founds Behavior Score
0.4
ZERO API file : clean
VT API (file) 3 detected (Detected, BladabindiNET)
md5 20f7d231a4c2c00595c943dc7633a24c
sha256 503b227eabb8e5784482aa1db2c6915bc8bbf24b2944cb1489c146c68807941d
ssdeep 384:exkXMewXyO5NB8mSBDoTCYgFeKCzQTObb7:ex2axFxNtb7
imphash
impfuzzy
  Network IP location

Signature (1cnts)

Level Description
notice File has been identified by 3 AntiVirus engines on VirusTotal as malicious

Rules (1cnts)

Level Name Description Collection
info PE_Header_Zero PE File Signature binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure